header-left
File #: 1192-2013    Version: 1
Type: Ordinance Status: Passed
File created: 5/8/2013 In control: Technology Committee
On agenda: 7/1/2013 Final action: 7/3/2013
Title: To authorize the Director of the Department of Technology to renew an agreement with SecureWorks, Inc. to provide managed technology security services in order to continue compliance with federal and state regulatory requirements; to authorize the Director of the Department of Technology to enter into an agreement with SecureWorks, Inc., for monitored firewall standalone technology security services; to waive the competitive bidding provisions of Columbus City Code; to authorize the expenditure of $179,132.50 from the Department of Technology, Information Services Division, internal service fund; and to declare an emergency. ($179,132.50)
Attachments: 1. Quote Managed Security 2013, 2. Bid Waiver Form Ord. No. 1192-2013, 3. City of Columbus Add Q073485 1
Explanation

BACKGROUND:
This ordinance authorizes the Director of the Department of Technology to renew an agreement with SecureWorks, Inc., for managed technology security services. The original agreement (EL011963) was authorized by ordinance 0818-2011, passed June 13, 2011. The agreement was most recently renewed by authority of ordinance 1220-2012, passed July 9, 2012, through purchase order EL013343; and subsequently modified by authority of ordinance 2456-2012, passed December 3, 2012, through purchase order EL013766. This renewal will provide service for the period August 26, 2013 through August 25, 2014, at a cost of $168,694.53.

This ordinance also authorizes the Director of the Department of Technology to enter into an agreement with SecureWorks, Inc., for monitored firewall standalone technology security services, in the amount of $10,437.97, with a coverage period of February 8, 2013 through February 7, 2014.

DoT requires services from a managed security provider in order to comply with federal and state regulatory requirements. These requirements include IRS tax information security guidelines, federal information processing standards, payment card industry data security standards, and the Health Information Portability and Accountability Act (HIPPA). Complying with these regulations requires advanced expertise and tools not available with current staff and systems.

As authorized by ordinance 2456-2012, the managed security service provided by SecureWorks was expanded last year, which explains the cost increase for continuing service this year. The additional service includes advanced threat intelligence, providing the City with advanced warning of emerging technology security threats. Also included is firewall monitoring, an expansion of existing network monitoring services from 50 to 150 devices; and an expansion of internal scanning services from 256 IP addresses to 512 IP addresses.


SecureWorks was awarded a contract through their a...

Click here for full text